Skip to content

Commit 970078d

Browse files
committed
Update elliptic to 6.5.7 (CVE-2024-42461)
In the Elliptic package 6.5.6 for Node.js, ECDSA signature malleability occurs because BER-encoded signatures are allowed. See https://nvd.nist.gov/vuln/detail/CVE-2024-42461 https://security.snyk.io/vuln/SNYK-JS-ELLIPTIC-7577918
1 parent 6d3474b commit 970078d

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

package.json

+1-1
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@
3232
"install": "node-gyp-build || exit 0"
3333
},
3434
"dependencies": {
35-
"elliptic": "^6.5.4",
35+
"elliptic": "^6.5.7",
3636
"node-addon-api": "^5.0.0",
3737
"node-gyp-build": "^4.2.0"
3838
},

0 commit comments

Comments
 (0)